The KAD/EBM/102 can operate on 10BASE-T, 100BASE-TX and Gigabit Ethernet (1000BASE-T) links and parse Ethernet frames. This allows the data within the parsed Ethernet frames to be distributed to other KAM-500 modules. The KAD/EBM/102 can classify traffic using 8 x 16-bit frame fields such as MAC addresses, IP addresses, IP length, protocol type (UDP/TCP), UDP or TCP port numbers. Up to 254 unique flows can be identified, where a flow represents a stream of Ethernet frames from a specific source to a specific destination.
Flows are tagged with time stamps and packet count. The identification is based on the classification parameters with optional masking. All other traffic, excluding network management traffic such as ARP and ICMP-PING, is optionally discarded or else monitored via the catchall parser slot-ID 254. The KAD/EBM/102 replies to ARP requests and ICMP-PING requests. The KAD/EBM/102 can optionally operate in a promiscuous mode, which allows it to observe all traffic on the link, not only packets that are addressed to it.
1000BASE-T IEEE 802.3 standard compatible Gigabit Ethernet interface over copper cabling
Monitors a single network link
Parses (triple buffers) and classifies Internet Protocol v4 (IPv4) packets
Identifies and monitors 254 different flows plus one catchall
Supports flow identification on selected frame fields (8 x 16-bit fields) such as Ethernet MAC addresses, IP addresses, Layer 3 (User Datagram Protocol/File Transfer Protocol (UDP/TCP)) fields, and Layer 4 application layer fields such as Stream Identifiers
Can be programmed to operate in promiscuous mode
Programmable speeds of operation 10BASE-T, 100BASE-TX, 1000BASE-T or auto
Features valid and error frame counters and error detection on Ethernet and IP layers
Supports a maximum IP packet size of 1,500 bytes
Monitoring, recording, diagnosis and troubleshooting of Ethernet network traffic
Detection of system failures and performance problems